S9060 MiniBus

malwareEnterprise

platformsWindows

also known asMiniBus

MiniBus is a custom backdoor used for command execution, data discovery, gathering, and exfiltration. MiniBus has utilized Azure Cloud Infrastructure and unique adversary-controlled domains for command and control. MiniBus is an updated platform to its predecessor MiniBike and was first observed in August 2023. MiniBus has been affiliated with the cyber espionage threat group NIMBUS MANTICORE.

techniques used (8)

ATT&CK techniques this enables or maps to.

T1057Process Discovery
T1071.001Web Protocols
T1105Ingress Tool Transfer
T1497.001System Checks
T1518.001Security Software Discovery
T1547.001Registry Run Keys / Startup Folder
T1574.001DLL
T1673Virtual Machine Discovery

used by groups (1)

Threat groups associated with this.

G1059NIMBUS MANTICORE

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan